bigeye-airflow1 (>=0.0.25, <=0.0.28), bsw-code-gen (>=0.1.5, <=0.1.8) +48 more potentially affected by CVE-2026-59890 via setuptools (57.0.0)

setuptools PYPI version 57.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bigeye-airflow1 =0.0.25, =0.1.5, =0.0.3, =0.8.0, =3.36.0.dev2, =0.1.8, =2.2.0, =0.0.1, =1.0.1, =0.0.4, =1.0.4, =0.3.9, =0.3.11 - eisenradio...

vrf (1.0.7) potentially affected by CVE-2026-59890 via setuptools (71.0.1)

setuptools PYPI version 71.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - vrf 1.0.7 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

c7n-azure (>=0.7.18, <=0.7.19), c7n-kube (>=0.2.18, <=0.2.19) +6 more potentially affected by CVE-2026-59890 via setuptools (65.4.1)

setuptools PYPI version 65.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - c7n-azure =0.7.18, =0.2.18, =0.1.0, =1.9.0, =1.10.0 - shaystack 0.10.0 - stapy 0.3.1 Source cves: CVE-2026-59890 Source advisory:...

aitest-cli (>=0.0.2, <=0.2.28), autocleus (0.1.1) +30 more potentially affected by CVE-2026-59890 via setuptools (45.2.0)

setuptools PYPI version 45.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aitest-cli =0.0.2, =1.0.0.dev2, =0.2.0, =0.1.0, =0.1.0, =0.1.4, =0.0.2, =0.0.1, =0.0.1, =0.1.3, =0.0.4, =3.0.0, =3.0.5 and more Source cves...

aibolit (1.3.0), ardupilot-methodic-configurator (>=1.4.6, <=1.4.8) +12 more potentially affected by CVE-2026-59890 via setuptools (80.7.1)

setuptools PYPI version 80.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aibolit 1.3.0 - ardupilot-methodic-configurator =1.4.6, =0.1.0, =1.2.0, =1.12.0rc1, =0.1.28, =1.0.11, =5.5.2, =4.0.0, =4.0.1 Source cves:...

airbyte-source-linkedin-ads (5.0.0.dev202412302306), aws-toolbox (0.0.5) +53 more potentially affected by CVE-2026-59890 via setuptools (72.2.0)

setuptools PYPI version 72.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - airbyte-source-linkedin-ads 5.0.0.dev202412302306 - aws-toolbox 0.0.5 - budgetize =0.2.0, =0.1.0, =0.19.0, =5.0.2, =1.4.0, =1.6.16, =4.2.4,...

backlog (2.0.2), butterfree (>=1.2.0.dev3, <=1.2.1) +21 more potentially affected by CVE-2026-59890 via setuptools (41.6.0)

setuptools PYPI version 41.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - backlog 2.0.2 - butterfree =1.2.0.dev3, =0.1.0, =0.4.1, =0.1.0, =0.1.2, =0.0.2b1, =0.1.8, =0.1.7, =0.1.15 and more Source cves:...

fizzbuzz-a-a-r-2 (0.1.0) potentially affected by CVE-2026-59890 via setuptools (57.2.0)

setuptools PYPI version 57.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - fizzbuzz-a-a-r-2 0.1.0 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

batchkit-examples-speechsdk (0.9.1), stringlifier (>=0.1.0.0, <=0.1.0.9) potentially affected by CVE-2026-59890 via setuptools (46.0.0)

setuptools PYPI version 46.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - batchkit-examples-speechsdk 0.9.1 - stringlifier =0.1.0.0, =0.1.0.9 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

talonfmt (>=0.2.1, <=1.10.1), tree-sitter-talon (1007.3.2.0) potentially affected by CVE-2026-59890 via setuptools (67.5.1)

setuptools PYPI version 67.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - talonfmt =0.2.1, =1.10.1 - tree-sitter-talon 1007.3.2.0 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

aiobook (0.1.0), carml (18.4.0) +5 more potentially affected by CVE-2026-59890 via setuptools (40.6.2)

setuptools PYPI version 40.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aiobook 0.1.0 - carml 18.4.0 - chaostoolkit 1.0.0rc1 - chaostoolkit-lib 1.0.0rc1 - commit-helper 3.4.13 - commit-helper-testing 3.4.8 -...

aiogram-translation (>=1.2.1, <=1.3.0), ambuview (>=0.1.0, <=0.1.3) +58 more potentially affected by CVE-2026-59890 via setuptools (60.2.0)

setuptools PYPI version 60.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aiogram-translation =1.2.1, =0.1.0, =1.1.0, =1.8.5, =0.1.1, =0.1.0, =0.9.2, =0.1.9, =0.0.0, =0.0.1, =0.0.5, =0.4.0, =0.0.2, =0.0.10 and mor...

@activeboxes/piece-gmail (0.8.1), @activeboxes/piece-imap (0.2.10) +97 more potentially affected by CVE-2026-59887 via linkify-it (>=5.0.0, <=5.0.1)

linkify-it NPM version =5.0.0, =0.6.0, =0.2.6, =0.0.1, =2026.7.1, =1.0.0, =1.0.6 - @autohive/cell-gmail 0.8.1 and more Source cves: CVE-2026-59887 Source advisory: OSV:GHSA-V245-V573-V5VM...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @middy/validator (>=5.4.3, <=5.4.4) +5 more potentially affected by CVE-2026-13676 via fast-uri (>=3.0.1, <=3.1.2)

fast-uri NPM version =3.0.1, =0.3.1, =5.4.3, =1.0.0, =1.0.0, =1.25.0, =2.2.0, =2.3.1 Source cves: CVE-2026-13676 Source advisory: OSV:GHSA-4C8G-83QW-93J6...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @middy/validator (>=5.4.3, <=5.4.4) +5 more potentially affected by CVE-2026-13676 via fast-uri (>=3.0.1, <=3.1.2)

fast-uri NPM version =3.0.1, =0.3.1, =5.4.3, =1.0.0, =1.0.0, =1.25.0, =2.2.0, =2.3.1 Source cves: CVE-2026-13676 Source advisory: GHSA-4C8G-83QW-93J6...

-graphql-codegen-client-preset-swc-test (>=2.0.1, <=2.0.2), 01-test-button (>=1.0.0, <=1.0.2) +10998 more potentially affected by CVE-2026-59880 via immutable (>=3.0.1, <=3.8.3)

immutable NPM version =3.0.1, =2.0.1, =1.0.0, =0.0.2, =0.2.0, =2.0.0-rc3, =1.0.0, =1.0.0, =0.1.0, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2026-59880 Source advisory: OSV:GHSA-XVCM-6775-5M9R...

-graphql-codegen-client-preset-swc-test (>=2.0.1, <=2.0.2), 01-test-button (>=1.0.0, <=1.0.2) +10998 more potentially affected by CVE-2026-59879 via immutable (>=3.0.1, <=3.8.3)

immutable NPM version =3.0.1, =2.0.1, =1.0.0, =0.0.2, =0.2.0, =2.0.0-rc3, =1.0.0, =1.0.0, =0.1.0, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: CVE-2026-59879 Source advisory: GHSA-V56Q-MH7H-F735...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @adhisang/minecraft-modding-mcp (1.0.0) +406 more potentially affected by CVE-2026-59896 via hono (>=4.11.8, <=4.12.26)

hono NPM version =4.11.8, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.5.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.9 and more Source cves: CVE-2026-59896 Source advisory: OSV:GHSA-HVRM-45R6-MJFJ...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @adhisang/minecraft-modding-mcp (1.0.0) +726 more potentially affected by CVE-2026-59895 via hono (>=4.0.0, <=4.12.26)

hono NPM version =4.0.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.9.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.4 and more Source cves: CVE-2026-59895 Source advisory: OSV:GHSA-W62V-XXXG-MG59...

homeassistant-stubs (2021.12.0b2), pytest-homeassistant-custom-component (0.5.0) potentially affected by CVE-2026-64825 via homeassistant (2021.12.0b2)

homeassistant PYPI version 2021.12.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.0b2 - pytest-homeassistant-custom-component 0.5.0 Source cves: CVE-2026-64825 Source advisory:...